Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: uy2SjNfxVmbGfUNQMiN8I4P/1yMd+xB5dmKiScykm+o=
Subject key identifier: 17:D3:7C:F9:CA:F5:CB:EE:41:59:C4:F8:69:1D:64:F5:9C:9F:18:BA
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019A0035D27DC16CD3D683BF07B71D448DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0E9B
Signing time: Mon 20 Oct 2025 06:01:58 +0000
Manifest this update: Mon 20 Oct 2025 06:01:58 +0000
Manifest next update: Tue 21 Oct 2025 06:01:58 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: DVeY2Q45EmAHO9KkqKW3azL9iwRgxiFfpItUUw/GR8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:d2:7d:c1:6c:d3:d6:83:bf:07:b7:1d:44:8d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Oct 20 06:01:58 2025 GMT
Not After : Oct 21 06:01:58 2025 GMT
Subject: CN=17d37cf9caf5cbee4159c4f8691d64f59c9f18ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:30:18:c5:68:89:b1:07:d1:2d:89:49:c8:
b3:fd:f9:d8:81:a4:63:f2:c0:f0:71:ec:9a:19:f9:
ae:9e:f5:65:c8:69:34:d1:9b:34:d8:86:cc:8a:32:
fb:47:e9:88:fd:69:ad:87:0e:9d:b6:bd:32:87:96:
6f:d8:89:91:5f:2b:7f:ba:49:6c:a9:5b:1b:69:a7:
b8:75:58:f2:53:41:58:6b:95:2a:85:94:51:96:d9:
5d:df:59:97:08:dc:b7:a8:a3:36:1e:c0:1b:7e:33:
c0:c4:da:19:e0:cf:26:4c:75:53:51:ff:e3:71:81:
36:a3:6e:8d:9b:4c:96:e0:5d:f6:e8:5b:ca:d3:53:
ef:16:55:8e:ee:59:b2:fb:c9:6c:a5:ac:a3:97:2d:
97:63:16:1e:6f:3b:d9:32:69:0f:c1:81:4d:c8:2e:
2a:c4:16:b2:ce:51:c5:94:43:72:f7:0c:29:b2:b9:
b8:14:1f:90:f9:e2:69:f2:2b:e7:3f:fe:e1:00:3e:
8b:49:29:0e:86:f8:f5:3b:5f:ae:77:b0:4e:cf:08:
9b:3c:95:93:7e:c1:9f:47:a7:53:b9:1e:83:7e:19:
3c:ea:07:f3:5e:85:33:3c:f3:e6:28:1e:fe:6d:61:
f6:87:73:35:75:3d:1a:b9:62:da:c1:21:29:85:3b:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:7C:F9:CA:F5:CB:EE:41:59:C4:F8:69:1D:64:F5:9C:9F:18:BA
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d5:88:ad:f5:3c:6b:8a:bd:02:7f:fa:95:3c:aa:c0:2a:37:
58:95:af:f1:d6:5d:9d:d7:18:fa:22:55:2c:61:40:0e:fc:3f:
3d:06:20:28:84:3f:23:b4:62:e2:f0:cb:7b:c5:c3:45:33:07:
72:c7:92:bd:d5:60:69:e8:f0:c1:e9:7b:5b:da:fb:30:c7:8d:
12:e0:2f:8e:3c:55:39:ff:f9:7c:0f:26:70:d2:78:c1:31:03:
89:3e:24:35:33:4e:09:f4:0c:ed:a2:6f:4b:5f:d9:95:ee:23:
b7:73:5b:57:a6:02:31:42:1a:01:33:ba:c2:05:2e:29:7d:ec:
fc:4f:31:8b:6d:f2:a7:28:30:7f:75:7b:83:a3:d4:fb:96:3d:
7d:80:e2:68:29:87:c8:dd:ab:ba:db:3e:93:d7:80:7a:96:35:
66:86:b1:4b:71:68:21:aa:39:ae:70:1e:4f:d4:92:63:e1:88:
99:c8:cd:64:6b:90:86:41:1f:b4:b3:36:59:24:89:b9:fc:54:
91:63:40:94:b7:cb:57:70:06:e8:7f:f6:54:04:e1:05:43:9e:
ec:e1:e0:1c:49:c7:d9:85:3d:11:7c:de:73:3b:d7:21:50:92:
b9:3b:d2:94:63:74:dd:1d:6b:8b:14:ee:59:25:3b:2f:49:b9:
1b:8c:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:56:25 2025 by rpki-client